Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: lsqTwoz/DZygKdC/vu8yQKIiUzPai9XCe4l3bM6QmYA=
Subject key identifier: 17:B5:D8:7F:43:B8:3F:EE:BF:47:37:41:29:99:41:5A:E5:C2:28:79
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 019A29D52FBF0C1E64A4FF0A09883D0C526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1719
Signing time: Tue 28 Oct 2025 08:00:28 +0000
Manifest this update: Tue 28 Oct 2025 08:00:28 +0000
Manifest next update: Wed 29 Oct 2025 08:00:28 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: 7QBiuWTKeULcTxmU5/4a8jn2UbgjuAvriWde0T7I5iw=)
2: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
3: eXzNPFB8evVF4M9GKM9iNp1CQKY.roa (hash: 3o1zQB3byjNP0T4iSERgx0SfW87i/ushB0KeeTR7qr4=)
4: ugt-KDKTow7I2OvsokQhSiya3XI.roa (hash: OVTlzU2wxqtsRIKxmANkEt2lrONo18X84ePf8/OFh9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:2f:bf:0c:1e:64:a4:ff:0a:09:88:3d:0c:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Oct 28 08:00:28 2025 GMT
Not After : Oct 29 08:00:28 2025 GMT
Subject: CN=17b5d87f43b83feebf4737412999415ae5c22879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:7c:79:54:f1:c7:a3:b0:d1:74:c7:2a:06:
2c:0a:37:f3:4d:99:ce:05:b2:19:3e:54:1f:e6:12:
57:64:8c:3b:63:06:b8:7b:8f:51:1a:81:60:0a:5f:
ee:b0:b9:c1:26:3a:d7:b9:b4:b1:5d:1d:2f:3f:e5:
a5:2c:dc:06:9b:73:cf:29:af:af:d0:26:75:88:cf:
4d:65:a8:ae:0a:bd:81:73:0d:94:69:85:4d:12:5d:
23:a2:00:92:18:d8:51:86:04:19:2e:3c:46:58:e6:
52:5f:54:ea:ee:ed:50:6b:15:3f:50:19:8a:f7:6c:
3c:91:92:75:a4:3d:cd:ae:df:90:ab:8c:07:6d:9b:
2b:01:d6:2b:73:5b:5f:b4:ad:67:d3:e7:58:91:94:
d2:55:92:e6:05:96:59:25:c0:6c:78:89:05:d0:21:
e9:ab:5b:ab:5a:b0:38:fe:34:4d:77:45:f5:e9:7f:
1b:51:2c:b9:79:28:fd:e8:39:05:84:3d:8a:66:ce:
f1:ae:3b:17:8b:61:61:69:c3:44:e8:f1:ea:9a:3f:
ef:42:c3:8f:d8:d8:ff:15:81:dc:59:07:71:eb:bc:
04:c6:73:04:62:35:72:a2:c5:39:87:bc:16:6e:d0:
90:6b:08:e8:ac:0e:2f:26:81:03:3f:10:3a:10:db:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:D8:7F:43:B8:3F:EE:BF:47:37:41:29:99:41:5A:E5:C2:28:79
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:15:6b:be:67:08:ba:46:08:a3:fe:ad:6a:49:5b:db:58:
50:68:c1:e4:0e:cd:ea:2c:b5:3a:72:be:09:b2:e2:1c:22:b6:
4c:51:46:01:da:0f:c0:1d:60:8c:56:a4:95:e0:58:00:1b:13:
17:b4:d0:5c:00:90:b1:a6:cb:10:32:64:d7:a7:01:0d:6e:e6:
a0:a4:fe:32:8c:ef:9e:43:b8:88:65:04:8d:ea:ba:cb:62:16:
d6:53:ff:e1:e4:fc:40:34:d6:81:72:aa:9d:0d:f8:fe:aa:c3:
31:42:65:6f:b5:8c:74:c3:f3:7f:6d:cd:55:f7:8c:7a:2b:3f:
7d:8e:bb:c6:1e:e0:ef:c5:96:57:af:4a:1d:f3:16:ad:8a:5d:
bc:08:cd:01:4f:33:1c:fc:47:68:6c:08:53:cd:97:c7:67:ce:
f3:48:fc:eb:16:8f:12:d8:34:06:56:f7:f3:8a:5a:0c:00:6b:
fa:d1:ca:e4:35:06:7f:3f:12:fa:84:80:9a:60:07:4d:1e:03:
f1:fb:b9:bc:f6:d1:7d:da:48:3a:ed:44:67:cd:e3:16:05:76:
4c:a0:f9:6e:12:46:28:e9:6c:20:e8:cf:b4:3c:87:71:e9:e2:
07:5b:59:c2:28:eb:f1:9e:7f:7e:1e:fb:41:27:c6:47:ec:2c:
ff:eb:42:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1S+/DB5kpP8KCYg9DFJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2
OTQ1NTAwHhcNMjUxMDI4MDgwMDI4WhcNMjUxMDI5MDgwMDI4WjAzMTEwLwYDVQQD
EygxN2I1ZDg3ZjQzYjgzZmVlYmY0NzM3NDEyOTk5NDE1YWU1YzIyODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0R8eVTxx6Ow0XTHKgYsCjfzTZnO
BbIZPlQf5hJXZIw7Ywa4e49RGoFgCl/usLnBJjrXubSxXR0vP+WlLNwGm3PPKa+v
0CZ1iM9NZaiuCr2Bcw2UaYVNEl0jogCSGNhRhgQZLjxGWOZSX1Tq7u1QaxU/UBmK
92w8kZJ1pD3Nrt+Qq4wHbZsrAdYrc1tftK1n0+dYkZTSVZLmBZZZJcBseIkF0CHp
q1urWrA4/jRNd0X16X8bUSy5eSj96DkFhD2KZs7xrjsXi2FhacNE6PHqmj/vQsOP
2Nj/FYHcWQdx67wExnMEYjVyosU5h7wWbtCQawjorA4vJoEDPxA6ENtJhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe12H9DuD/uv0c3QSmZQVrlwih5MB8GA1UdIwQY
MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt
NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4
LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnwVa75n
CLpGCKP+rWpJW9tYUGjB5A7N6iy1OnK+CbLiHCK2TFFGAdoPwB1gjFakleBYABsT
F7TQXACQsabLEDJk16cBDW7moKT+MozvnkO4iGUEjeq6y2IW1lP/4eT8QDTWgXKq
nQ34/qrDMUJlb7WMdMPzf23NVfeMeis/fY67xh7g78WWV69KHfMWrYpdvAjNAU8z
HPxHaGwIU82Xx2fO80j86xaPEtg0Blb384paDABr+tHK5DUGfz8S+oSAmmAHTR4D
8fu5vPbRfdpIOu1EZ83jFgV2TKD5bhJGKOlsIOjPtDyHceniB1tZwijr8Z5/fh77
QSfGR+ws/+tCRw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:17:14 2025 by rpki-client